CVE-2016-1664

MEDIUM · 4.3 CVSS Gepubliceerd: 14-05-2016 CWE-254

Beschrijving

The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.

Vendors

Google Redhat Opensuse

Affected products

Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary Enterprise Linux Server Supplementary Eus Enterprise Linux Workstation Supplementary Opensuse

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
rhn.redhat.com
www.debian.org
www.securityfocus.com
codereview.chromium.org
crbug.com
security.gentoo.org